VEX records
Browse vendor VEX statements available in this Vulnerability-Lookup instance and pivot to the related vulnerability.
224786 VEX records
API response| Vulnerability | Source | Title | Product status | Imported | Links |
|---|---|---|---|---|---|
| CVE-2025-52555 | redhat_vex | ceph: privilege escalation by unprivileged users in a ceph-fuse mounted CephFS | fixed: 707 known affected: 155 known not affected: 393 | 2026-06-30T03:09:50+00:00 | Vulnerability · Source |
| CVE-2025-52434 | redhat_vex | tomcat: Apache Tomcat denial of service | fixed: 99 known affected: 28 known not affected: 9 | 2026-06-30T03:09:47+00:00 | Vulnerability · Source |
| CVE-2025-52194 | redhat_vex | libsndfile: buffer overflow when processing crafted IRCAM audio files | known affected: 3 known not affected: 16 | 2026-06-30T03:09:46+00:00 | Vulnerability · Source |
| CVE-2025-50952 | redhat_vex | openjpeg: Openjpeg NULL pointer dereference | known affected: 27 | 2026-06-30T03:09:42+00:00 | Vulnerability · Source |
| CVE-2025-50182 | redhat_vex | urllib3: urllib3 does not control redirects in browsers and Node.js | fixed: 4 known affected: 325 known not affected: 194 | 2026-06-30T03:09:41+00:00 | Vulnerability · Source |
| CVE-2025-50951 | redhat_vex | fontforge: Fontforge memory leak | known affected: 6 | 2026-06-30T03:09:41+00:00 | Vulnerability · Source |
| CVE-2025-50949 | redhat_vex | fontforge: Fontforge memory leak | known affected: 6 | 2026-06-30T03:09:37+00:00 | Vulnerability · Source |
| CVE-2025-50181 | redhat_vex | urllib3: urllib3 redirects are not disabled when retries are disabled on PoolManager instantiation | fixed: 11 known affected: 323 known not affected: 236 | 2026-06-30T03:09:34+00:00 | Vulnerability · Source |
| CVE-2025-49826 | redhat_vex | nextjs: Next.js denial of service | known affected: 44 known not affected: 12 | 2026-06-30T03:09:32+00:00 | Vulnerability · Source |
| CVE-2025-49133 | redhat_vex | libtpms: Libtpms Out-of-Bounds Read Vulnerability | fixed: 2927 known affected: 6 | 2026-06-30T03:07:54+00:00 | Vulnerability · Source |
| CVE-2025-49128 | redhat_vex | com.fasterxml.jackson.core/jackson-core: Jackson-core Memory Disclosure via Source Snippet in JsonLocation | known affected: 168 known not affected: 4 | 2026-06-30T03:07:53+00:00 | Vulnerability · Source |
| CVE-2025-49014 | redhat_vex | jq: jq Heap Use-After-Free Vulnerability | known affected: 1 known not affected: 12 | 2026-06-30T03:07:51+00:00 | Vulnerability · Source |
| CVE-2025-48988 | redhat_vex | tomcat: Apache Tomcat DoS in multipart upload | fixed: 142 known affected: 55 | 2026-06-30T03:07:48+00:00 | Vulnerability · Source |
| CVE-2025-48976 | redhat_vex | apache-commons-fileupload: Apache Commons FileUpload DoS via part headers | fixed: 142 known affected: 57 | 2026-06-30T03:07:45+00:00 | Vulnerability · Source |
| CVE-2025-48964 | redhat_vex | iputils: iputils integer overflow | fixed: 112 known affected: 5 | 2026-06-30T03:07:43+00:00 | Vulnerability · Source |
| CVE-2025-48386 | redhat_vex | git: Git buffer overflow | known affected: 82 | 2026-06-30T03:07:39+00:00 | Vulnerability · Source |
| CVE-2025-48072 | redhat_vex | openexr: OpenEXR Out of Bounds Read | known not affected: 24 | 2026-06-30T03:07:37+00:00 | Vulnerability · Source |
| CVE-2025-48367 | redhat_vex | redis: Redis Unauthenticated Denial of Service | fixed: 213 known affected: 6 known not affected: 42 | 2026-06-30T03:07:36+00:00 | Vulnerability · Source |
| CVE-2025-48068 | redhat_vex | next.js: Information exposure in Next.js dev server due to lack of origin verification | known affected: 31 | 2026-06-30T03:07:31+00:00 | Vulnerability · Source |
| CVE-2025-48060 | redhat_vex | jq: AddressSanitizer: stack-buffer-overflow in jq_fuzz_execute (jv_string_vfmt) | fixed: 243 known affected: 2 known not affected: 2119 | 2026-06-30T03:07:29+00:00 | Vulnerability · Source |
| CVE-2025-47912 | redhat_vex | net/url: Insufficient validation of bracketed IPv6 hostnames in net/url | fixed: 8 known affected: 705 | 2026-06-30T03:07:26+00:00 | Vulnerability · Source |
| CVE-2025-47908 | redhat_vex | github.com/rs/cors: Denial of service via malicious preflight requests in github.com/rs/cors | known affected: 41 known not affected: 121 | 2026-06-30T03:07:22+00:00 | Vulnerability · Source |
| CVE-2025-47906 | redhat_vex | os/exec: Unexpected paths returned from LookPath in os/exec | fixed: 319 known affected: 1346 known not affected: 3 | 2026-06-30T03:07:20+00:00 | Vulnerability · Source |
| CVE-2025-47808 | redhat_vex | gstreamer1-plugins-base: GStreamer Subparse NULL Pointer Dereference | known affected: 16 | 2026-06-30T03:07:16+00:00 | Vulnerability · Source |
| CVE-2025-47807 | redhat_vex | gstreamer1-plugins-base: GStreamer Subparse NULL Pointer Dereference | known affected: 16 | 2026-06-30T03:07:13+00:00 | Vulnerability · Source |
| CVE-2025-47806 | redhat_vex | gstreamer1-plugins-base: GStreamer Subparse Stack Buffer Overflow | known affected: 16 | 2026-06-30T03:07:12+00:00 | Vulnerability · Source |
| CVE-2025-47268 | redhat_vex | iputils: Signed Integer Overflow in Timestamp Multiplication in iputils ping | fixed: 112 known affected: 7 | 2026-06-30T03:07:05+00:00 | Vulnerability · Source |
| CVE-2025-47219 | redhat_vex | gstreamer1-plugins-good: GStreamer MP4 Parser Heap Overflow | known affected: 11 | 2026-06-30T03:07:03+00:00 | Vulnerability · Source |
| CVE-2025-47183 | redhat_vex | gstreamer1-plugins-good: GStreamer MP4 Parser Heap Overflow | known affected: 11 | 2026-06-30T03:07:00+00:00 | Vulnerability · Source |
| CVE-2025-47153 | redhat_vex | nodejs: libuv: Out-of-Bounds Access Due to Inconsistent off_t Size in libuv and Node.js Build on i386 | known not affected: 57 | 2026-06-30T03:06:59+00:00 | Vulnerability · Source |
| CVE-2025-46784 | redhat_vex | lasso: Memory exhaustion in Entr'ouvert Lasso | known not affected: 4 | 2026-06-30T03:06:57+00:00 | Vulnerability · Source |
| CVE-2025-46705 | redhat_vex | lasso: Denial of service in Entr'ouvert Lasso | known affected: 4 | 2026-06-30T03:06:51+00:00 | Vulnerability · Source |
| CVE-2025-46646 | redhat_vex | Ghostscript: Mishandling of Overlong UTF-8 Encoding in Artifex Ghostscript's decode_utf8 Function | known affected: 39 | 2026-06-30T03:06:49+00:00 | Vulnerability · Source |
| CVE-2025-46701 | redhat_vex | tomcat: Apache Tomcat: Security constraint bypass for CGI scripts | fixed: 61 known affected: 38 | 2026-06-30T03:06:49+00:00 | Vulnerability · Source |
| CVE-2025-46653 | redhat_vex | formidable: Use of Cryptographically Weak Pseudo-Random Number Generator (PRNG) in Formidable | known affected: 45 | 2026-06-30T03:06:46+00:00 | Vulnerability · Source |
| CVE-2025-46404 | redhat_vex | lasso: Denial of service in Entr'ouvert Lasso | known not affected: 4 | 2026-06-30T03:06:39+00:00 | Vulnerability · Source |
| CVE-2025-45767 | redhat_vex | jose: Jose Weak Encryption Vulnerability | known affected: 7 known not affected: 50 | 2026-06-30T03:06:28+00:00 | Vulnerability · Source |
| CVE-2025-43903 | redhat_vex | poppler: SignatureValue not checked within SignerInfo | known affected: 54 | 2026-06-30T03:06:24+00:00 | Vulnerability · Source |
| CVE-2025-43392 | redhat_vex | webkitgtk: A website may exfiltrate image data cross-origin | fixed: 482 known affected: 9 | 2026-06-30T03:06:20+00:00 | Vulnerability · Source |
| CVE-2025-43356 | redhat_vex | webkitgtk: A website may be able to access sensor information without user consent | fixed: 482 known affected: 4 known not affected: 5 | 2026-06-30T03:06:18+00:00 | Vulnerability · Source |
| CVE-2025-41254 | redhat_vex | org.springframework/spring-core: Spring Framework STOMP CSRF Vulnerability | known affected: 34 | 2026-06-30T03:06:16+00:00 | Vulnerability · Source |
| CVE-2025-41242 | redhat_vex | org.springframework/spring-webmvc: Spring Framework MVC path traversal vulnerability | known affected: 26 known not affected: 4 | 2026-06-30T03:06:15+00:00 | Vulnerability · Source |
| CVE-2025-41234 | redhat_vex | springframework: Reflected download attack in Spring Framework with non-ASCII headers | known affected: 37 | 2026-06-30T03:06:11+00:00 | Vulnerability · Source |
| CVE-2025-40928 | redhat_vex | JSON-XS: integer buffer overflow causing a segfault when parsing crafted JSON | fixed: 52 | 2026-06-30T03:06:07+00:00 | Vulnerability · Source |
| CVE-2025-40918 | redhat_vex | authen-sasl: Authen::SASL::Perl::DIGEST_MD5 insecure cnonce generation | known affected: 5 | 2026-06-30T03:06:06+00:00 | Vulnerability · Source |
| CVE-2025-40777 | redhat_vex | bind: bind assertion failure | known not affected: 86 | 2026-06-30T03:06:02+00:00 | Vulnerability · Source |
| CVE-2025-14905 | redhat_vex | 389-ds-base: 389-ds-base: Remote Code Execution and Denial of Service via heap buffer overflow | fixed: 586 known affected: 6 | 2026-06-30T03:05:16+00:00 | Vulnerability · Source |
| CVE-2025-14831 | redhat_vex | gnutls: GnuTLS: Denial of Service via excessive resource consumption during certificate verification | fixed: 811 known affected: 12 known not affected: 47 | 2026-06-30T03:05:13+00:00 | Vulnerability · Source |
| CVE-2025-14104 | redhat_vex | util-linux: util-linux: Heap buffer overread in setpwnam() when processing 256-byte usernames | fixed: 640 known affected: 17 known not affected: 60 | 2026-06-30T03:05:09+00:00 | Vulnerability · Source |
| CVE-2025-14242 | redhat_vex | vsftpd: vsftpd: Denial of service via integer overflow in ls command parameter parsing | fixed: 148 known affected: 4 | 2026-06-30T03:05:08+00:00 | Vulnerability · Source |